648-385 Cisco Express Foundation for Field Engineers Questions and Answers

Catalyst 3560-X Series

Catalyst 2900 Series

Catalyst 4500 Series

Catalyst 6500 Series

Catalyst 4900 Series

GLBP

GSRP

HSRP

VRRP

Nexus 7000 Series Switches

Catalyst Compact Switches

Catalyst 3700 Series Switches

Catalyst 4500 Series Switches

Catalyst 6500 Series Switches

It supports always-on connectivity by automatically establishing a VPN connection as needed. If multiple VPN gateways exist, load sharing occurs in a round-robin fashion.

It supports session persistence after hibernation or standby.

Trusted Network Detection allows the connection to be established without any user intervention (authentication), if the client is located inside the office.

It is exclusively configured by central policies; no local configuration is possible.

The order of policy enforcement is as follows: dynamic access policy, user attributes, tunnel group, group policy attributes.

IP source guard

static ARP inspection

MACsec

DNS snooping

SGACL

port security

MACsec provides Layer 2 hop-by-hop encryption, based on the 802.1AE standard.

Cisco AnyConnect Release 3.0 supports both roles: supplicant and authenticator.

802.1X protection includes the CMD field, which is used to carry the security group tag value.

MACsec does not work between any MACsec-capable supplicant and authenticator.

context-aware policy

virtual office management

network management

service provider policy

context-aware security enforcement

SBA guides are available for enterprise deployments only.

CVD includes everything from rough designs to tested versions of software code.

Gold partners have access to a demo lab for each validated design.

CVD is technology-oriented, while SBA is market-and solution-oriented.

SSL VPN

IPsec VPN

host intrusion prevention system

Cisco TelePresence

MACsec encryption

antivirus

Cisco Prime Security

A company offers mobile email to its employees, who can then react faster to requests.

A company implements collaboration solutions, which simplified information exchange.

A company changes its security strategy from "lock down" to "secure access from anywhere", so that users are "always-on" and can easily work remotely.

A company implements EnergyWise solutions, which drastically reduce energy costs.

A company provides support for a BYOD solution, which increases the investment and requires network upgrades, but provides limited improvements compared to a well-known remote access solution.

Mobile email services

BYOD Cisco EnergyWise

Multivendor network solution

Collaboration solutions

context-aware policy

virtual office management

network management

content access control

context-aware security enforcement

network and global intelligence

Are you exploring new cloud and BYOD business models?

Do you have any Cisco Nexus 7000 deployed in your network?

Are you using single-vendor security equipment?

Are you enforcing the same security policies consistently across your organization's network?

What are the operating hours of your security response team?

Cisco has the largest market share in the Layer 2 and Layer 3 switch market.

Other competitors in switch market have a market share of less than 10% together.

Competitors do not provide an overall solution framework similar to the Cisco Borderless Network.

Most competitors in switch market support Cisco.

Competitors more efficiently support the BYOD solution.

Understand the business objectives, current environment, and pain points of the customer.

Revise the current infrastructure, financial data, and operational management capabilities.

Identify configuration flaws on individual devices.

Analyze collected data and identify potential savings.

Review the organizational hierarchy and prepare the plan for reorganization.

Review the data center design and infrastructure, prepare the effective multivendor solution.

Cisco AnyConnect VPN

Cisco Port Security VPN

Cisco SSL VPN

Cisco MACsec VPN

Cisco Remote VPN

The technical solution has to be based on the previously defined architecture.

The technical solution must not consider existing solution, it must be built from scratch.

CVDs provide proven design of single-vendor solutions.

Numerous CVDs are available that provide all the information needed for a successful deployment.

The SBA toolkit includes foundation design guides that focus on concepts as well as foundation design guides that show detailed configurations.

The technical solution has to be based on the previously defined architecture.

Examples of low-level design tools are the Cisco Power Calculator, the Cisco Rack Space Calculator, and the Cisco DSP Calculator.

CVDs provide proven design of solutions that include only Cisco products, which ensures single-vendor solutions.

Numerous CVDs are available that provide all the information needed for a successful deployment.

The SBA toolkit includes foundation design guides that focus on concepts as well as foundation design guides that show detailed configurations.

Understand the business objectives, current environment, and pain points of the customer.

Assess the current infrastructure, financial data, and operational management capabilities.

Identify configuration flaws on individual devices.

Analyze collected data, identify potential savings, and develop TCO and ROI.

Deliver business case documentation, detailed technical solution scenarios, and TCO report.

CVD is technology-oriented, while SBA is market- and solution-oriented.

SBA guides are available for enterprise deployments only.

SBA is a blueprint for delivering the three Cisco architectures in a modular approach.

Gold partners have access to a demo lab for each validated design.

It provides simple and efficient management across architectures, networks, and services.

It provides simple and efficient management of security services.

It provides management services for all TrustSec products.

It is an expert-level monitoring and troubleshooting tool based on Cisco SIO.

It automatically configures a Cisco AnyConnect SSL tunnel, which allows Cisco TAC engineers to connect to malfunctioning devices.

It enables network operators to open instant messaging conversations with Cisco TAC engineers.

Cisco Smart Interactions allow network operators to open service requests to Cisco TAC in a controlled manner. Relevant information such as current configuration, last configuration changes, and events can be attached by a single mouse click.

It can collect crucial information such as associated devices and their current IP address and status based on the user's name.